Abstract:Intellectual property (IP) protection is one of the hardcore problems in hardware security. Semiconductor industry still lacks effective and proactive defense to shield IPs from reverse engineering (RE) based attacks. Integrated circuit (IC) camouflaging technique fills this gap by replacing some conventional logic gates in the IPs with specially designed logic cells (called camouflaged gates) without changing the functions of the IPs. The camouflaged gates can perform different logic functions while maintaining an identical look to RE attackers, thus preventing them from obtaining the layout information of the IP directly from RE tools. Since it was first proposed in 2012, circuit camouflaging has become one of the hottest research topics in hardware security focusing on two fundamental problems. How to choose the types of camouflaged gates and decide where to insert them in order to simultaneously minimize the performance overhead and optimize the RE complexity? How can an attacker de-camouflage a camouflaged circuit and complete the RE attack? In this article, we review the evolution of circuit camouflaging through this spear and shield race. First, we introduce the design methods of four different kinds of camouflaged cells based on true/dummy contacts, static random access memory (SRAM), doping, and emerging devices, respectively. Then we elaborate four representative de-camouflaging attacks: brute force attack, IC testing based attack, satisfiability-based (SAT-based) attack, and the circuit partition based attack, and the corresponding countermeasures: clique-based camouflaging, CamoPerturb, AND-tree camouflaging, and equivalent class based camouflaging, respectively. We argue that the current research efforts should be on reducing overhead introduced by circuit camouflaging and defeating de-camouflaging attacks. We point out that exploring features of emerging devices could be a promising direction. Finally, as a complement to circuit camouflaging, we conclude with a brief review of other state-of-the-art IP protection techniques.

Exploring Advanced Packaging Technologies for Reverse Engineering a System-in-Package (SiP)

Automatic Protocol Reverse Engineering for Industrial Control Systems with Dynamic Taint Analysis

A Survey on Chip to System Reverse Engineering

A Review of System-in-Package Technologies: Application and Reliability of Advanced Packaging

Advancing Trustworthiness in System-in-Package: A Novel Root-of-Trust Hardware Security Module for Heterogeneous Integration

Integration of Information Security Chips Based on System-in-Package

A Look at the Dark Side of Hardware Reverse Engineering -- A Case Study

Security Assessment of Interposer-based Chiplet Integration

Efficient and secure intellectual property (IP) design with split fabrication

Heterogeneous Integration Supply Chain Integrity Through Blockchain and CHSM

Spear and Shield: Evolution of Integrated Circuit Camouflaging

Split-Chip Design to Prevent IP Reverse Engineering

Verification of physical designs using an integrated reverse engineering flow for nanoscale technologies

Cost-Aware Exploration for Chiplet-Based Architecture with Advanced Packaging Technologies

CAPTIVE: Constrained Adversarial Perturbations to Thwart IC Reverse Engineering

Circuit Partitioning Based Fingerprinting Method for IP Protection

Integrated Design of Information Security Chip Based on Artificial Intelligence System Level Package (Sip)

US Microelectronics Packaging Ecosystem: Challenges and Opportunities

Efficacy of Satisfiability Based Attacks in the Presence of Circuit Reverse Engineering Errors

Design and Reliability Analysis of Spaceborne Microsystem SiP

Best of Both Worlds: Integration of Split Manufacturing and Camouflaging into a Security-Driven CAD Flow for 3D ICs